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tz&mm j %'£&]£t&f&mx* ? yy'y&mu mz 

[If*® 2 3 ItfBHg^ffcgfftt. 

#HWI5KBST?**iWt#«^BJW-*INfflex tyyy'y 

c i zmkt-t mim 1 ©«, 30 

Eft*® 3 ] flffiSBSBx * 5 y -7=7 it, 

m mzmtrnggfr t>xn t* •„ h yij*sf§* s a^w 

U fll CDBfr^^©-fe^i/^-t^ yy h i^'x^i.. 

fftf Bl^M^X 9 5 ©7^ - hV*. y ? fr-y'^ffifc 
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[If*® 1 2 3 m&ttmz* ?yyy°y\U 
gfc©A>WrU «®^*ffifflLT. ^A^CiicBf^ 
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[0003] ^^©7^'i>'^^i^figii'fiv'X7 1 A©y-j:^(c 

^£fe©fc&S 0 WlTLti. 7fcBBftii{ij^|gt&£(Telec 
ommunication Industry Association) "C^n x^*^ h 4/ 

©t#P^©SK^T©)g (tfr-^s v) {±. PN-3421 
£12* ft*: (IS-95a<t LT£St;*ftS) Mobile Station 
-Base Station Compatibility Standard for Dual-Mode 
Spread Spectrum Cellular System tLX, 1994^12^ 30 

kwt tsntz am. wmtm-z) o as¥s&rsaffi 

^^f!]^fir^-feX(Code Division Multiple Access) 

^•>-£i^-*:a6. {Sii-ft/coT. ^S**l.MiT'- 
^^*B&^ft-#"4S+i®*^A^^o C©=t3!^ ^ 
|5*SW;i7W©6^©£l©5tfflK'5 ¥©#**. fe£ 
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t' y h ictfxfe LTl^4 2 ©SUKS^;** (19 HI"*-*: 

filf^S3?iJ*»&©^-y F*f>Mr4Ct*«HIffire* 
6?o L*>Ltt#&. fHapfTeii. S^-^ir^iJ© t'.y h 
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•y h S C £T\ g^i2?lj© t* y h © 
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[0 0 0 8] 5fciMxWl{l^!t5&£ (The Telecommunic 
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XxA©fca6©ti¥£I&^LT^So TIA(4. x^<^ 

(Code Division Multiple Access, CDMA) £V$l$tl 
TO-5o tWPIs©— 3ETJ4, «tilfiKfc{t^7 0 -7i'^' 

^-©^tt^fSiUT^So *PiIg©g?0%£T*©Ji£ (?' 

r-v?a^) (4, PN-3421itE*n/c (IS-95a<fc LT£ 
iS^tlS) Mobile Station-Base Station Compatibilit 
y Standard forDual-Mode Spread Spectrum Cellular S 
ystemiLT, 1994^12^ tzftrftstlt*, (JsJKk 

^tFf^7C«--r Sis t^^!cfi£oT^3lTt>n/cii{I 20 
■>-X^A{4. Bf^->X-xA©tSft«cfcUT. JaBftdStsftl 

(4. Bf^fc^ft/difi^©-***^ l> 2rif L/c. 

Co o o 93 tPi^T^^n/dii^RiifiggiHSS^p 

TOSAP^tigW-SfcOi^JtSo [2|lfi. f$P3&<:?£ 30 
o/c, JSftH^tcfcltS 1 OT—flStfjfCTj^ti/c, /ItS^TfSj 

Otis ^Mfcii. i§ffg§ft^§ <* + *a43F*§&1 
T^So 

[00103 mmsm^s 1 2 x^^^a^j^ i 
ztumtzo ^jk.(±*. a^ii^- 1 *r»* y h 7-^ 

(cfcitS, ?^ifc£ft/cx'v^ -r — ^ , £>S^ 

(4{S£©/ci6©, *©ffe©aH0jttft-*f*#*-5* o iiff 

ggft^gg 1 2 , fc<£tf'7*a y ? >f y — y< l 4 (4, (g 40 
§I0i^-^f , h*s % {^©F^ipfcbn/c*). ?R(4* 

sn^^LTi^t^s iii^najilfiSSiHESi o©tr#7^ 
®KK*NktS, iiffgS^lli 2(4, 

(4. 7 (7U-An'Jf^) fg/T^§l 8. 

mmt^2 0 , fijA^^§§2 2 , I5^HI»§2 4 
©B^lJ^S&^A/Tr^So 7*D y 4 

iifeJCs iiffSSfi^i 2i4. ^S^tifclfE^a 
[00113 SSBBf^gl 6«4, *Hf*fG££l£U 
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Mwi-i*> x •» -9 2 8 is^«§§2 6 <&mm 

S c &W%£8t%s2 6fc«fc4fcB2n?**. {f*fF(4. g 
^f^lJiP?{±*nT^-5 0 r'-»-^|5|S&2 8(4. Sft 
-tiS^'J© t* y h © 6 4 ©o *>— o^ff^G <t LTtfJ^rt- 
S D r^-^ 8©tfcty4, gtfteWOR|ia&©«fc? 

*'/aD2© (2 S0m§g©A^J!C^ 

snr^So iifiSSW^i 2(4. £/c *->^d2© 
(2£&<t-#-s) finB353 ooA^i-gtfoi^nr^ 

So *'^o2© <2*St-T*) flDll3§3 0(4. ff^ 

^7»t'-y hff-^P C B!±. t/c. ^mimZ 2 
StlT^So ^S^fcii3 2tt. fi-^O^Ell ©JIKM! 
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ii. 8 i^-fi-fbglS 2 ©»A^©Fb^^ 
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i7^f-^ U— h©i^(Cfc(j"S§7 U-AJi, 1 
7 2 f.y — ^T-ii. Sfcfg^^— ^ U- h 
©l^iCfcl«^{4. t>-#*^l 6 h' y M 

*»#*/SV\, BB%SdEES2 4 (4, t — h©l^ 
^©fI^E{cfc{^S^#:©t*.y hj5fc&s|lIL:t<£SJ;-5 
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[0 0 2 2] E|4(i> 11 OICfc^T— flSMiil^tk 

mX'$>Z> 0 $H£&->*^A1 1 Otis &%ig&kS) (Mobile 
Switching Center. MS C) 1 1 4 (c-jStfotf itu. * 
ftiiifiL-O^. ftSftOSttil^l 1 2£^A,T^£o 
MS C 1 Hit — o£Lh©n-#;Wg (rfil^lj) 1 1 

8 1— -opjLte>wm 1 2 o ^ts^m^ms^m 

(public switched telephone network. PSTN) (C^ 50 



tfottitU tntMis LT<^3o PS TNI 1 6Ji. 
££{C N u-fDVW} (rftp*^) 1 1 2 
Of^tfottitU ^-niiiff L-C^£EC©iffi*l 2 2 

£^/r-o-S>o HESS^i. ^JxJi\ fty r4>< 

WiMit *r-7'Mz.£V)^ p s TN{c!±tfotf£>n-5 
-So t/c. »^fAi l Oli. — oELhote^^ 
1 2 4^t'i^o Sa&tlSS* 1 2 4 fccktf&Stfc/i] 
l l 2 ©JUSlSMlSSli. iSo^xfAfeiotJSi 

[o o 2 33 sww!i> »->^fA i loii, mm 

1 1 2 £«®Jifii*l 2 4 i©r^TB^<ksn/c{f^E 
iH-s)-3o 0>]x.ii'. *8$Si*l 2 4^.©iiff(i. g^S* 
1 2 2{cfc^T§^*n-?'?.o v-tu\sWi (rp|*I©) 1 
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1 8 tM S C 1 1 4 (4. ffiM&fc 1 2 2 £mW£W&g) 

1 1 2^ttm-tz° ms$mi 1 2(4. hee^i 2 2 

[0 0 2 4] 151^ 112 (Cte^T— flStfjiOj^ft, 
— 0©gg»J©-7* o .y ^^T^^o Sitil^l 1 2(4, 

isffl&ii 2 4 ^i^^eaH-siKSisiiHissi 2 6 

£^Are^€> 0 £tfflJ3l 1 2 (4, «&k£1 2 4 

^ £ ©fi-*f£^ttBfc-5ig^HIS£ ( y ' *- x * + * 

;!/) 1 2 8^TU5o JlK&lSHiffSSl 2 6 (4, Hffl 

-sf-fbSsi 3 0^Ti^o lot, lig£|S]iIfIg£i 2 
6 (4. {iMK&tf&^y -i ^-^-©tiSp^is^LT^ 

So 

[0 0 2 5] JlKSlSfiHi Eg 1 2 6(4. MS C 1 1 4 (cig 

o'oit^nr^^iifiss^^i 3 2*^t?^4o nil 

£fSii§fig§l 2 6(4, S^IC t' y h-f 'J-^l 3 
4. Bf^ffcggl 3 0. 9*^^g§Bg0^1 3 6.fi 

*g) M$^tH§s 140, R F^ffgS 1 4 2 ©fi?lJ©£§ 
^aAT'^So RFi£ffg*l 4 2(4T>^1 4 4 d 

JV) 1 2 8(4, RFSfl^ffl 4 6. mMmS (B35fi 

m m&MMmi 4 8. itsfiaa cm^ms) 

S150. iSSfiSggi 5 2. 9* ;w>~S3^IE8Si 5 
4. tr-y hf-j y-'*i 5 6. iiflg§fl^g§ <*■•»• 

*^^ag> 1 5 8©fi?IJ©^£^A/^3o 
[0 0 2 6] KjfW4, Jli^fSjiiflSSl 2 6 (4, 7Vf 
tl4 4-e©{5cl©/ca6!C. MS C 1 1 4 ^©fg-^r 
4flSU Bf^tr^o MS C 1 Hit r^'Wi^fe 
ilffg&W^ffl 3 2 fc#8£rSo iIfIS§^3f 1 3 2 
(4, fc^©iS9lJiE©fcafc{I^**^tLT^*o 

t"y M V? y-^1 3 4(4, ^7— X b(D§&g& 

Bf^kSi 3 0(4, t*-y h>fy^y-/<i 3 4 /&>£©{! 

S 0 * * /i/->~|}tK®93Sgi 3 6 (4. iSR^n/c^ * ^ 
•>^P*l&£{I^!-&tf3-£T-. ff^«^H-So Eft 

{fitSfit^Hl 3 8(4, @J©8*1 2 2 t«5ffi*l 2 4 
Ps^CDfE^i-liJW©. iSR ^fttPN (pseudo-noi se) ft^ 
«rfeoTft^*ffi«W-*o fi^G^SMil^il^l 4 0 
(4. TVrtl4 4m RFSHSl 4 2KlJ:*fei£ 

[0 0 2 7] i3^|ii(fg§ <y^-X^ + *^) 1 2 8 
(4. T Vrt 14 4 teitfgfigl 4 6 Clfc^T. M& 

1 4 8(4, 4QS©fc#>. Jffii^*^fl^^Illtt'So it 
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■Wlffi.1 2 4 *^©fl^jmf^-^o $KI*#§ 1 5 2 
(4. WB+HI^&JB^T. ££fcM$ffi*i 2 4*>& 
©fI^imt!rr-?.o *^->^f3*f«§§i 5 4(4. 

h y i 5 6 (4. ff-^«-fc(t a t'.y h ^sie 
au m*s*i 2 4 {z^vn.ftztiK'i y? y -7* 

IfiiyfTiEa^j^ffl^T. »^S*i 2 4^b©fl^!-fc 
10 ^SS0*fTiE"#-So 

[0 0 2 8] [216 !i. 12 4 icfe^t-fMC/TiSft. 

-y ^t9Efe** 0 fflffl&il 2 4 J4. »ttil©l 1 

1 6 0^W^o fiSl^re*l 2 411, Xttfilj 

1 1 2*^{f-^^i-rsjii>5-i^a{ig§i 6 

nis^[°iiifiE§i 6 2(4. mmm^^^tmm 
wm^&%*-\m^mv\ftt'<m\mi e 4 

-e^i, 0 toT, )\W5 RSflES i 6 2(4. fSi(c*j(j-s 

20 y^^-OiiflQ^tgffiLT^So 

[0 0 2 9] M^StIcI 6 8(4. Atttff (I/O) 
1 6 AHi^J ( I/O) SKI 6 6(4. 

x tf— *»<fctf-7"f ^ y*t*^5 0 iSRM(- 
(4. AtB^) (I/O) ^Hl 6 6(4. jgttfcE-y-**- 
h*^*5 4o ilSi!iiiffg§ ( V^-x^-t,*^) 1 6 
0(4. AttttJ (I/O) igBl 6 6(c|±y:'o(j-^=la/c^ 
^^§§1 6 8^/,-CU^o : g^W^l 6 8(4. ii 

{fl^§^^^i5l 7 o. f^^^ 72. 

->^l5^iS§5l 7 4 . l£t^§s 17 6. ilM{SfgJ£t([il 

30 178. mft&m6£<$^8& 1 8 0 . r Famssi 8 

2©fi^lJ©^^(C^±0'o(y-^tLTUi.o RFi^fi|18 
2(4. 8 4 (C^tfotf^tlTO-So j^^lil 

ffSS (y^-Xft*^) 1 6 2(4. RF^ff^il 8 

6 . mMmsmm&mm 1 8 8 . it^fiwsim^ 1 
9 0. v**->~mkmmi 92. m^tsu 6 4. 

t'y hf^ y-^i 94. SfiS&t-sfiii 96, t 

pifl^ 1 9 8eO^\<D$^iZ^ZJf^tfibnX^io m 
Wmm&l 9 8(4. Ati&J (I/O) SS16 6 (CiSC/ 

40 [0 0 3 0] HWtt, iS^iiifiSS C)^-X^ + * 
^) 1 6 0 (4, 7Vftl84 -C©fS2l©/cis6, ^— 
i)^(D\m^^mtho W^tt^m 1 6 8(4, Atitfj 

(i/o) ^Bi 6 6*»t»©^'^-'Hi^?3^fW- 

ilfIS§«F^l 7 0(4, iiM<DWiC0m:mUE<Dtzi6 
m^&ttmttZo h'.y h>f 'J-^'l 7 2(4, Wk<0 
^-x h©fi#^S/MJBftr?>J:9!-. ff^(cfc(j-Sf 

•y hs^ij^sseer^o ^*^->^^^i^i 74 

(4. lR4*lfc>> * ^ ->^^<&(I^(-SKt^ C iT\ 
fl^^t-So ffi^l 7 6 (4. *-{I-Sf£/mvC. 
50 * ^-V^^OTii 1 7 4 3&»6©{i%*i2aW-So fi 
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gjfflfl&fitlSgl 7 8(1 gt©S*l 2 2 £»mfcl 2 
4 ©PB^fSHicSf^©. iaR^^Tt P N (pseudo-noise) 
#^£fcoTfi*f4i£IW-"5o fift^^IiEffl 8 0 
il T Vx^- 1 8 4 T©> R Figflgg 182IU 
©^{I^&^Ii^-So 

[0 0 3 1] JlKSlpBSfigS 1 6 211 TVrtl 84fe 

ck^t^i 8 6(cfcuT, £td!@i 1 
wmfrt>@ft 3 &&s8tZo BM^ssast^i 9 o 

(1 iSttl^PNff^ffl^T. Stft^l 1 2foio<Ot§ft 10 

«irt5o -5 * ^^raSSSBSi 9 2 (1 jgKlft 
6 4(1 Hffi*- {f^ffl^-r. Siti2©i i 2 *>£>©{! 
19 411 fl-SftcfctfS f y h£W@ggU Sffigi l 

(c^-To iwtif&fs^i 9 6ii wkmiimffi&m^ 
1 1 2 zammzisii &m *> zznEt & 0 
^jsm^m 1 9 8ji Aft?) (i/o) saei 6 6^© 

imZm^U ©H*^T*ti:So _ 20 

[0 0 3 2] 07(1 1 3 OiCfcl^T— 
/c. |2]5©Jli#[Slii{fg§l 2 Bg^ftlg- 
oHK6B»|t*So Bf^fkSi 3 0(1 Sw§vx^M 

§|2 0 0 . SW^^fi5(Sff2 0 2 . t*» 2 0 4 ©OS 

0 4©titfj(l t^o2D (2*ffi<!:-#-4) flnSEgg2 
0 6©lf5— ©A^Mtfotf^ftT^So flt®§52 0 6 
©|gZl©A^I(i t* / h >^ U - /N ' 13 4 (C|*C/oit <i 

tvr^So 

[00 3 3] ifWH I^^^ ^4«2 0 0 (1 30 

£)&gs2 0 011 ^P^@E^"J©t*-y l-A^TX^© 

t- k icm^tm-t Sct^i Ei3 ©gj^^Bssg 2 

0 2 (1 #ft^X ^7^72 02 ©H#l b' -y h j&Sgffi: 

y'y 2 0 2 ©IIK^rcov vtM$trEl9 —El l 5 £#J»a 

LTl#HW£o * 7 >77 2 0 2 (C=k 

(1 #*UF2X * 5 2 0 2 ii7 ^ - K'*-y * ^-7° 

C 1 3&fRlftln?* -So & S Oil #1*1^ X * 7 V 7* 

72 0 2(1 g«^@^iJ(c^^4^A-t4^^ffi 
^SfiSHK*> 6 £ £ i t> Rlfl&e* coi^icL 

±t*£-l±£o f-^-^2 0 411 gf3pSf£j53c£§2 0 2 

a»e>x maoiii^^w-rsf y hi±i^^iitR^-So m 

X(l 2 0 4(1 g^^£§|2 0 2 (CJ: S 

6 4©t' y MJtfj©?*.— o^UKiLoSo Snff§i2 0 50 
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6(1 t*W-* 2 0 4*^©{I^«t t'.y h^vj- ■; — 
'<1 3 4^"i©fi^ (2£&<tLT) fctSo 
[0 0 3 4] H8(l 16 4(cfe^t-)|§MK/T;^n 

flu Bi6©iiKSiajiifissi 6 2Tffli^n^. «-^fiag 

©^»l|T*^o fg^bgffl 6 4(1 S^vx^« 
^2 0 8> S^«g§2 1 0. t"s*—9 2. 1 2 ©it 
^©^^fe^T. ^-{I^^Jci-^o x>^-^2 
1 2©{±5^J(i. ?^°20 (2^i-^€>) ^I3^g|2 

1 4©|g— ©A?Jli3£tfotf fctlTOfco ^[^§§2 1 4 
©^©Atl(±. f * ^ >^IB-^M§5 1 9 2 ic^'o 

[0 0 3 5] !M^4>(i> \ 6 4 (1 *— ff#£ 

Sitil©l 1 2*»^Sfi Lfcff-SfCBf^t-^fk 
^->So ^©ck O (-. «^fbg 1 6 4 (1 B^-fbgg 1 3 0 

T^So S^^x^^fiSgg2 0 8(1 gRg© 

Sf§7X^^t', hE?(I*^l5SW-So fi^^JSs 

2 0 8(1 ft^-^^IJ©t*y h*iS^^X^©f y h 

KmZKffirtZ**)^ El3©gw^^Jc§|2 6a4> 
e.ttSdi*«Rft&^*So tWflv^?^ ^1'^ 2 10 
(1 #N^^X ^7>7'72 10 ©fcB^tiy 
X ^ © f y h (C^ L J: -5 (C N 

@5^IJ© t* y h *X ^ 5 ^7*^ So #BSfl5X ^7 7 
2 1 0©^{«]!co^T(±m-rEl9~E]l 5^#MLT 
#*BI5x ^ 7 2 1 0 d J; oT^5c^ n 

c tifipRlere&Zo *.S^(i, #KSff^x ^ ^ 2 l 

^ajficj; oTfg$,£ti£ >x ^ Aii ^«e)^S^^ 

x^M©t-y h^f-rsct(^trsrait4*iiA^ 

tirSo 7 ,1 s*-iT2 1 2(1 S^?S^i52 1 0 

e^D©ii^^-rs t-.y hfcB^/^iSR-rso mzjiis 

yf*-? 2 l 2(1 m£r^%J$M2 1 0 (C=tS 6 4© 

t- y mt^©-p^— o*m*L-5s 0 j[®^2 1 4(1 

^->^-^2 1 2 3&»e,©fi-^<i:9*^i'»B5Ktii^l 
9 2*>fe>©fs-^*J0^.*o 

[0 0 3 6] 119(1 2 0 2 a(c*Jl^— fl5W(c^:S 
*^©U^rrs<!:C6!^oT^*tL/c. 

g| 9 -Ell 5T'^£ft/c[H]SSfl Bf^flSl 3 0* 

7tii?g^k§5 1 6 4 ©i vr*n(cfc^T®#rs c t &rj 

H^*4o fj^©^. EI9-IH1 5©t$#S(l B^-fk 
§§1 3 OOi^lWUT/cl^Oc X? 5 ^7*5 2 0 2 
a!l JfflteWORy- h 2 1 6. ^M/^^2 1 
8. fifflSE$£2 2 OfccfcO^X-f 7 f2 2 2^-i^So S 

?9P^feBSS2 o 0©ay3fe«k^ifiaeES2 2 o©^* 

m\WiOR f f-V2 1 6©A>^(-it^tLSo PftilWOR 
¥— Y 2 1 6 ©tB> f ]!i>'7 h Uv'X^ 2 1 SfcJitfx-f 
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7 f2 2 2{£g^£ft&o 
iCs ©^£#$§2 o 0 cDtU^jiix-f 7f2 2 2t fcg 

[0 0 3 7] l!)fpB#(C{±s x^7^7'72 0 2all 7 
4 - Y' < y 9 ji>- -f^m ^ c i ic ck 9 g*rf@^iJ© f 

■y hZmW^^etfr^Kt'-y hWtfq&ii&jtZo 

(W)ORy-H2 1 6{±f y h£->7 hU>^X^2 1 8 
Iztitfj-tZo ^©k'-y Mi>7 1 8£iIL 

T>7 h£fts I^HISS2 2 0T^ftiC*I&£;b£ft 
&o f6@H]S§2 2 0lim!i'Wi:ANDy- h 

^ 0 *sw*v. i^ihis§2 2 o ttsa«*sffl^ifiaHiK 

Kttiiit)^?**" !raSH]S§2 2 0 tis >7 h 
us*x*2 1 8tcA^t* v l-# s *£*ffi(^ S£P*§fS*J© 
ifS£©t'y hi. BtftfeWORfr- h 2 1 6(-J:oTttS7J 

$ ft/di£© tr -y h ©ssawia^a: <t KflcGft" £ ? 

ds IHffiORV- h 2 1 6 ~-©fg2 OA^/^W^^o 
X-f y^2 2 2ii. g33P^£jj5882 0 0^f'^2 
04IC^ffit§CiiaoTX^7y7*7202a 
CD^^N'-f ^'X £ £ feRj^-Cfe-So v-7 h W v? 

x^2 1 8£? >JTi-Sfea6©y-fe-y Ha^fcgfctt^tt 

[0 0 3 81 010^ 
fl?X? 5 ^7*5 ©feo— o©Hfi{#l2 0 2 b^r/K^o X 
? v 2 0 2 biis 6 4m<D-{2jV^ir^'>y h u 

5?^2 24KttSo >7 HUS?X*2 2 4<D&*» 
li7;l/f7V?t2 2 6 ©Aft(-flci!£ft&o ££!-s 
->7 h Uv'X^ 2 2 4<D0~5i:7^$*l/:-b^iiv 
A-f7'l/?t2 2 6<D^\s# ??<JjlzW&i£tlZ> 0 
^-•-sgd5-e*5AS. v^f7V^*2 2 6©-bl^^^A 
;ft£LTSis h l/v'X^ 2 2 4 C-bMOHO^f 

ft© 6 -d^^i- sci: fepfBErefc &o 

coo3 9] mrm^it, mzm&qw-, n^7i> 

l/y 5 /;^2 2 4 ; aioTi'7h$niio >7 bUis*.? 
2 2 4©-fe^0~5rt©fiStiN ->7 hUv'X^ 2 2 4© 
-tr;]/©?-^*"^ v;l/f7V?f 2 2 6 #fcB:tt k* hi 
LTfJ'^-^ 2 o 4Jc«ff ■fe-rt/SnSW-io 

[00 403 01 11^ *^{^oT^c^ft/c^ 
fl$x * 5 >7*5> ©fe "9— r><DWffi\2 0 2 c ^/KTo X 
; 7 y7720 2 c!t 6 4{@©-fe;l' ; £:Wi"& >7 h U 
$?X* 2 2 8*»&fc4o ^7 M^X?2 2 8©N<i© 
jgR^ft/-c-fe-'l/^-7-'l'^7V^*2 3 0©-bU^r?A^J 
Jcf3^£ft&o S&Ks >7 M/^X? 2 2 8©2~ 

[N] f@©iitR^ft/c-fe/l'*i-7>'l'^7V^-^2 3 0©A 

[0 0 4 1] t&ftsSfctt. g*SntSS*J©k*v Hi->7 h 

lxv=X^2 2 8^M-oX'>y h£ft&o 7^7"^t 
2 3 Ofi. hu^x?2 2 8#>£>©-tei'??A2N£ 
So%^T>7 h Ui>X^ 2 2 8© — oO-tefr&MRfr 
ho iKR£ft*:-fe^©fiiJix* 7 V772 0 2 c©{±l>t) 



£ LTf->^ -^204 {qgSftSo 
[0 0 4 2] Hll 2 «C *^«c^oT^^ft/c^ 
fl$X?5 V7*7©fe-5— o©|t»]2 0 2 d£7K3-o X 
^7V7'72 0 2dli, 6 4{i©-fe^Wi"-S >7 h W 
^^2 3 2*^aSo >7 M^X* 2 3 2©#-fe>»l/ 
l*T'-*H&^ft81lfc (DE S) @g§2 3 4©A^<-f£*5E 
£ft-2> 0 D E S1e0§2 3 4 (is Federal InformationPro 
cessing Standards Publication 46 (January 15. 197 
7) i:Sotr-^^tt^o tesBBfi^D ES@ 
10 g&2 3 4(cA7j£ft3o DES[hE&2 3 4(is U'v*** 

2 3 6(C^gc^ft7t6 4f|©tB^J«r#^*o L-^X^2 

3 6 ©j§gR£ftfc— oO-fe-rt/j&Sx? 7 V7*Me$£2 0 2 

d©yKj£*£&o 

[0043] iw^j-ii. mzmmw; ni->7i- 

U-^X;?2 3 2£il-?T->7 h£ft&o DES[H]E£2 3 

4 (is H{f-^fectOfii^©DE SS3t*ffl^T->7 h W 
-^X^ 2 3 2|*lffl'r-^ ; &B^-fttS 0 DES[hIS§2 3 
4ti. h l/'^? 2 3 2\H<b?-9<V^\\M$:^ 
v=X^ 2 3 6 !£i±J77r>£>o 7^77 2 0 2 dliW^ 

20 X^ 2 3 6 *»&©Utftfi-*f 2 0 4(CiHa o 

[0044] ii3ic -^mfiv^t^xm^rvtzim^ 

ii>Xi'7V7"70feo -oOiPl 2 0 2 e ^/TTo X 
? ^ >-7*v 2 0 2 e {i. 6 4McD-b;V$;ftir2> >y h 
i?X^2 4 0KWo >7 h U-^X^ 2 4 0©N{1© 
jgtR$ftfc-b^*^N«Sff«tS*2 4 2 
ft^,o m«i"s #BWH!»JSS)62 4 2iis 2{@©A7JA 
NDY-hi, ^S»gai*«^JW-*^a6©iaSt5:MK 

[0 0 4 5] trf13#{-{is SW^f^'J©t' y hrt->7 F 
30 U'^^240 T ->7 h Sft-So &ffi%ti&&& 

2 4 2{is ->7 h Uv ? X^2 4 0©N{@©A^/-fe^©fil 

[0 0 4 6] 114IC *^{^oT^K*ft/^? 
IX^^^Ci^- o©^S^I|2 0 2 f &7frf 0 X 

^ 7 ^7*7 2 o 2 f (is ffliWio ry- h 2 4 4 . ~yy 

hViS*?2 4 6s mism®0S§2 4 8 *>J:tJS|B2SiS 
[HEf§2 5 0A»&tt.So S^feHScil2 0 0 (D&JjjoXtf 
^1!SShIS§2 4 8©Hi>tJ{i^MWORy- h 2 4 4© 
A2JK88R3*l"So SMIfeWORy- h 2 4 4ti->7 h u 
40 5?X^2 4 6«cg^fe*ftSoSSlS(iiSeIK2 4 8tti'7 

h u >>'x ^ 2 4 6 ©^SS^©-tz^^©^ v y'^-fZo M. 

tic, ^2fiS[plSS2 5 Oiis ->7hU-^X^2 4 6© 
-fe^©-5-e»©^2©iltR^ft^-fey h^' ! -7'4ft 
ho 1$2%mLW&2 5 0©fcB>t>{is X?7^7 2 0 2 
f ©tttfliftSo •>7H/^X^2 4 8feiO ; 2 5 0^ 

[0 0 4 7] i/?f^{^{is X ^ v >7* v 2 0 2 f !is 7 
^ _ k^' 7 ^ jv—y'&m^Z £ !c «t i9S^-^12?iJ© f 
•y h^^JF^fClfl^^fcf-y hg^lJ^tbTJ-r-So P 
50 ffeMORy— h 2 4 4 lih' y h^ri>'7 h Vv?X? 2 4 6 
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K\£)TfZ>o *0fc*-y Hi->7 YXoV-X? 2 4 6£jIL 
X > 7 h * tU m 1 f£@[Elg£ 2 4 8 TiSRMJcia^.^^ 

£*i5o ^ l fiSHE® 2 4 8 tt0J*ti3PPBfc A N D Y- 
h^ttSo ^H^S5I5§2 4 8{#Blteffi 

£-£!&3lE» & C t °f£&r£>3o If? l I^IhISS 
2 4 8ii. >7 2 4 6<CA& t' v 

ft!RF*»lJ©5S£© f.y h dr. MafiO Ry- h 2 

AA^x^x^ti^ ntzm^o t* h ©fig® <t 

\zJfcfr$h& 0 !C IHWOR^r- H244 ^©|£2 © 
A?T£W-#-£o 1^2 I^I[hBS2 5 0it U^X^2 4 6 10 

^72 0 2 f (DtftfjtirZo 

[o o 4 8] mi 5 (c. ^mmim^m,^titam 

ffijx? y yy'v<Dk>o — ?<DWM?\2 0 2 g£-7K^o ^ 
^7^7720 2 flt EPftjWO R y- h 2 5 2 . >7 
h U-;x?2 5 4. ^lf^ElSS2 5 6fcJ;^B2!ig 
5 8^&3o ftfi^ijJ^ 0 0©atf)fcckt/ 
1 I^SiHf§2 5 6 ©tftfj(*#MtfetfJO Ry- h 2 5 2 © 
ATjf-^^So »0 RY- h 2 5 2 h U 

i?** 2 5 4 ICfg^tl&o ^H^aeISS2 5 6(i->7 20 

hv->*x?2 5 6 ©^(©-fe^-v©^ v y'^-t^o £ 

fMi^K- {i} \^Mmz£j&irz 

mizi&Sirttiblcmi I(hSIhE?§2 5 6 {cA?J£n&o 

lfl2§j|IIlE$§2 5 81*. v-7 h Uv=X^ 2 5 4©-fe^© 
^©^©iliR^Tt-fey h^©^7^ffS 0 If? 

2©*m$ik~ {2} ^itm^£$cfz>m^<& 

mi-&fr&lz%i2t^E$&2 5 8(ilA^*^-?.o ifS2f[l 
SHE® 2 5 8©ttt73ii> X? 5 >-7'^2 0 2 g.<D\&ht 
UZ>o '>7 F U 2 5 6 fciO 1 ^ 5 8 'J 7t I 

[0 0 4 9] ifrfFStiCijU X^7>/7 2 0 2 gtes £& 

itiJTf&o C<DM&t'v M^iJtLTii. ft£r^fel53§ 
2 0 0 iCcfcoT^£*l/cS?5P=h?X^ {f-^K— 
{1} kL<«K~ {2} , ttzit^tli>(D^tm^ 
^t^mn^o BfflmORY- h 2 5 2 (i t"y 
7 H/'^^2 5 4 {CfcitfT^-So -^©f y Hi->7 hU 
-^X^ 2 5 4^iiLT>7 h^n. ^lf^l[Hl§2 5 6 

-eff-^K- {i} ©b-y h iiitRM^i^-^sn^o 

m 1 1 raSEE® 2 5 6 ii^Rf A N D h fob ft 40 

& 0 $>h^\u m tm&E&2 5 6 iimmm.^:im 
\mfr*tezztbm%x&z a mia^iHiss2 5 6 

ii. ->7 h U-^X;? 2 5 4 {CA-I) t' y ft 
JRHUS*]©^© f-y h gifi&MO Ry- h 2 5 2 <C 
«toTtB^^tl/d§*©f.y hiff-^K- {1} ©IfaS 

SMtfaiftORy- h 2 5 2 
-.©^2©A^^-r^o ^2f^[5IS§2 5 8 It. Isi? 
X?2 5 4©3liR*n/c-fe^ii©t- y h^ff-^K— 
{2} Ot' y I- ii*&MTX^ 7 >7' 7 2 0 2 g© 
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[0050] me&^z&x&zfik mm**? 

7 2 0 2 gti. ft?3Hf£j&3§2 0 0^L^«O 
-> x x A J; 19 fc^l ^j^^i^i^l- & C £: # & 0 
ftft^£l#g5 2 0 0*SBt^^bi|l 3 0frC,m>tltzm 
f^-t^tiA^-^-S/c^icJi. K~ {1} . K~ 
{2} Ztzlt^cDWj&M&izLWintftezm^ $ 
K~ {1} . K~ {2} ^Ji^oBSi^ 
ft^«§§2 0 0 Ji. i5§iOg^7X^ 

■&Mts<£&X-&Z>j!)K K~ {1} */c!iK~ {2} © 
I ^-ftlfr&^m Ltzi><D fc*^©e^i6^l|gffll*I «c 4, 

^>o 

[0 0 5 1] Mi 6ic N E|5©St(ii§i 1 2-effiffl-^-S 

/cfe©Bt^'fb§5© O — 3©^fel?l| 1 3 0 a^TFTTo Bf 
-t'ffclsl 3 0ali ; yy h u-^x^ 2 6 0. ^J&ffi^ 
6 2 fc.t?>V>^ 2 6 4 ©Gj^'J^ao^ =tot 

mim^Qs&irZo 2 6 4 ©asftii* ^ n 

2j|^g|2 6 6 ©mi A^i-^^^o ^[®§52 6 6 
©m2A^Jiit* y l-fyj"j-^'l3 4i:gi*tilio 
^©ft^-7X^MA^^fl^g|2 6 2 {^A^7* 

[0 0 5 2] Srf^iCii. Bf^<b^l 3 0 a(i. ftft^f 

•7 X 7 © h* y h ©#^flM-a^"^*> St'yHCto TH 

{f^^Jci-r-So ->7 M^>x^ 2 6 0 \v2$m>m.fch 
t* y hg^ij^^K^-ao w$mme&^2 6 2(±. ft^F 

-^•7 X ? M^: >7M/^X^260 ©fcB^J<tia^^-t± 
So rft-f 2 6 4li, #S§ff^fl^-§i2 6 2 *^tti 

^j^n-St- y h^gE^ciHsg-eiSR-r-So <?>]x.ii'> 

> -iJ' 2 6 4 ii. #^JF^fi^±l52 6 2 iHj: oXai73* 
hit? 4<i{Cl{@©ilJ^ThtJ^-r^>o ^PSE§§2 

6 6!i. t' y h-^ 'J — 3 4fot>(D{E J ^ : &'r->* 
-^2 6 4i>i©i^i (2^tLt) ftmrt&o 
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U Title of Invention 

CRYPTOGRAPEIC SYSTEM FOR WIRELESS COMMUNICATIONS 
2. Claims 

1 . A base station in a spread spectrum wireless communications 
system, comprising: 

an RF antenna; 

a reverse channel that receives and processes a signal from a wireless 
terminal; and 

a forward channel that transmits an input signal from a mobile switching 
center to a wireless terminal, said forward channel circuit 
comprising: 

a channel coder responsive to said mobile switching center that 
provides error correction to said input signal, 

a bit interleaver responsive to said channel coder that rearranges the 
order of the bits in the input signal so as to minimize the 
effect of error bursts, 

an encryptor responsive to said channel coder that encrypts said 

input signal, said encryptor including a nonlinear scrambler 
for generating a key signal comprising a sequence of bits 
that have a nonlinear relationship to a private long code 
mask, and 

circuitry responsive to said channel coder, said bit interleaver and 
said encryptor and coupled to said antenna for modulating 
and transmitting said input signal. 

2. The base station of claim 1, wherein said encryptor comprises: 

a long code generator that creates a long code sequence from a long code 
mask; 

a nonlinear scrambler responsive to said long code generator that creates a 
key signal that is a nonlinear function of the bits of the long code 
mask; and 

a circuit responsive to said bit interleaver and said nonlinear scrambler that 
encrypts said input signal. 
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3. The base station of claim 2, wherein said non-linear scrambler 

comprises: 

a shift register having a first predetermined number of cells, said shift 

register having an input to receive a stream of input bits from said 
long code register; 

a first logic circuit coupled to said shift register so as to access the contents 
of selected cells, said first logic circuit having an output; 

a second logic circuit having first and second inputs and an output, said 
first input coupled to said long code generator, said second input 
coupled to said output of said first logic circuit, and said output 
coupled to said input of said shift register so as to provide a 
feedback loop for said nonlinear scrambler, said output of said 
second logic circuit also comprising the output of said nonlinear 
scrambler. 

4. The base station of claim 3 3 wherein said second logic circuit 
comprises an ExclusLve-OR gate. 



5. The base station of claim 2, wherein said nonlinear scrambler 
includes a feedback loop. 

6. TTie base station of claim 2 wherein said nonlinear scrambler 
comprises a feedback loop such that an output bit of said nonlinear scrambler is used to 
create a subsequent output bit. 

7. The base station of claim 2, wherein said nonlinear scrambler 

comprises: 

a shift register having a predetermined number of cells, said shift register 

having an input to receive a stream of input bits from said long code 
generator; and 

a combinational logic circuit coupled to tap the contents of selected cells of 
said shift register so as to provide an output for said nonlinear 
scrambler. 
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8. The base station of claim 7, wherein said combinational logic circuit 
comprises an AND-gate having at least two inputs coupled to selected cells of said shift 
register. 

9. The base station of claim 2, wherein said nonlinear scrambler 

comprises: 

a shift register having a predetermined number of cells, said shift register 

having an input to receive a stream of input bits from said long code 
generator, and 

a multiplexer having a predetermined number of data inputs and a 

predetermined number of selector inputs, said selector inputs 
coupled to a first set of selected cells of said shift register and said 
data inputs coupled to a second selected set of cells of said shift 
register such that the first set of cells selects among the second set 
of cells to provide an output from said multiplexer. 



10. The base station of claim 9, wherein said first and second sets of 
cells are mutually exclusive. 

1 1. The base station of claim 9, wherein said first and second sets of 
cells share a predetermined number of cells. 

12. The base station of claim 2, wherein said nonlinear scrambler 

comprises: 

a shift register having a predetermined number of cells, said shift register 

having an input to receive a stream of input bits from said long code 
generator; 

a data encryption standard circuit having a predetermined number of inputs 
coupled to selected cells of said shift register for using a key signal 
to create an encrypted output bit for each input; and 

a register having a predetermined number of cells, each cell coupled to 
receive a bit output by said data encryption standard circuit, a 
selected cell of said register providing the output of said nonlinear 
scrambling register. 
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1 3. The base station of claim 2 9 wherein said nonlinear scrambler 

comprises: 

a feedback circuit responsive to said long code generator, said feedback 

circuit including a shift register; and 
a combinational logic circuit coupled to tap selected cells of said shift 

register so as to generate an output for said nonlinear scrambler. 

14. An encryptor for encrypting an input signal in a forward channel of 
a spread spectrum wireless communication system, said encryptor comprising: 

a long code generator that creates a long code sequence from a long code 
mask; 

a nonlinear scrambler responsive to said long code generator that creates a 
key signal that is a nonlinear function of the bits of the long code 
mask; and 

a combinational logic circuit that encrypts said input signal with said key 
signal. 

15. The encryptor of claim 14, wherein said non -linear scrambling 
circuit comprises: 

a shift register having a first predetermined number of cells, said shift 

register having an input to receive a stream of input bits from said 
long code register; 

a first logic circuit coupled to said shift register so as to access the contents 
of predetermined cells, said first logic circuit having an output; 

a second logic circuit having first and second inputs and an output, said 
first input coupled to said long code generator, said second input 
coupled to said output of said first logic circuit, and said output 
coupled to said input of said shift register so as to provide a 
feedback loop for said nonlinear scrambler, said output of said 
second logic circuit also comprising the output of said nonlinear 
scrambler. 



16. The encryptor of claim 15, wherein said second logic circuit 
comprises an Exclusive-OR gate. 
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17. The encryptor of claim 14, wherein said nonlinear scrambler 
comprises a feedback loop such that an output bit of said nonlinear scrambler is used to 
create a subsequent output bit. 

1 8. The encryptor of claim 14, wherein said nonlinear scrambler 

comprises: 

a shift register having a predetermined number of cells, said shift register 

having an input to receive a stream of input bits from said long code 
generator; and 

a combinational logic circuit coupled to tap the contents of a 

predetermined number of said cells of said shift register so as to 
provide an output of said nonlinear scrambler. 

19. The encryptor of claim 18, wherein said combinational logic circuit 
comprises an AND-gate having at least two inputs coupled to selected cells of said shift 
register. 

20. The encryptor of claim 14, wherein said nonlinear scrambler 

comprises: 

a shift register having a predetermined number of cells, said shift register 

having an input to receive a stream of input hits from said long code 
generator; and 

a multiplexer having a predetermined number of data inputs and a 

predetermined number of selector inputs, said selector inputs 
coupled to a first set of selected cells of said shift register and said 
data inputs coupled to a second selected set of cells of said shift 
register such that the first set of cells selects among the second set 
of cells to provide an output from said multiplexer. 

21. The base station of claim 20, wherein said first and second sets of 
cells are mutually exclusive. 



22. The base station of claim 20, wherein said first and second sets of 
cells share a predetermined number of cells. 
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23. The base station of claim 14, wherein said nonlinear scrambler 

comprises: 

a shift register having a predetermined number of cells, said shift register 

having an input to receive a stream of input bits from said long code 
generator; 

a data encryption standard circuit having a predetermined number of inputs 
coupled to selected cells of said shift register for using a key signal 
to create an encrypted output bit for each input; and 

a register having a predetermined number of cells, each cell coupled to 
receive a bit output by said data encryption standard circuit, a 
selected cell of said register providing the output of said nonlinear 
scrambling register. 



24. A wireless terminal for a spread spectrum wireless communication 
sysscem, comprising: 

an RF antenna; 

a reverse channel circuit that processes and transmits a signal to a base 
station; and 

a forward channel circuit that receives and processes a transmitted signal 
from a base station, said forward channel circuit comprising: 
a receiver circuit coupled to said antenna that demodulates said 

transmitted signal, 
a decryptor responsive to said receiver circuit that decrypts said 
transmitted signal, said decryptor including a nonlinear 
scrambler for generating a key signal comprising a sequence 
of bits that have a nonlinear relationship to a private long 
code mask, 

a bit deinterleaver responsive to said receiver circuit that rearranges 
the order of the bits in die transmitted signal, 

a channel decoder responsive to said receiver circuit that provides 
error correction to said transmitted signal, 

a voice decoder responsive to said receiver circuit that generates an 
output signal from said transmitted signal, and 

an output device for outpuiting the transmitted signal. 
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25. The wireless terminal of claim 24, wherein said decryptor 

comprises: 

a long code generator that creates a long code sequence from a long code 
mask; 

a nonlinear scrambler responsive to said long code generator that creates 

an key signal that is a nonlinear function of the bits of the long code 
mask:; and 

a combinational logic circuit responsive to said nonlinear scrambler and 
said receiver circuit that decrypts said transmitted signal. 

26. The wireless terminal of claim 25, wherein said non-linear 

scrambling circuit comprises: 

a shift register having a first predetermined number of cells, said shift 

register having an input to receive, a scream of input bits from said 
long code register; 

a first logic circuit coupled to said shift register so as to access the contents 
of selected cells, said first logic circuit having an output; 

a second logic circuit having first and second inputs and an output, said 
first input coupled to said long code generator, said second input 
coupled to said output of said first logic circuit, and said output 
coupled to said input of said shift register so as to provide a 
feedback loop for said nonlinear scrambler, said output of said 
second logic circuit also comprising the output of said nonlinear 
scrambler. 

27. The wireless terminal of claim 26 a wherein said second logic circuit 
comprises an Exclusive-OR gate, 

28. The wireless terminal of claim 25, wherein said nonlinear scrambler 
includes a feedback loop. 

29. The wireless terminal of claim 25 wherein said nonlinear scrambler 
comprises a feedback loop such that an output bit of said nonlinear scrambler is used to 
create a subsequent output bit. 
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30. The wireless terminal of claim 25, wherein said nonlinear scrambler 

comprises: 

a shift register having a predetermined number of cells, said shift register 

having an input to receive a stream of input bits from said long code 
generator; and 

a combinational logic circuit coupled to tap the contents of selected cells of 
said shift register so as to provide an output of said nonlinear 
scrambler. 

3 1 . The wireless terminal of claim 30, wherein said combinational logic 
circuit comprises an AND-gate having at least two inputs coupled to selected cells of said 
shift register. 



comprises: 



32. The wireless terminal of claim 25, wherein said nonlinear scrambler 

a shift register having a predetermined number of ceils, said shift register 

having an input to receive a stream of input bits from said long code 
generator; and 

a multiplexer having a predetermined number of data inputs and a 

predetermined number of selector inputs, said selector inputs 
coupled to a first set of selected cells of said shift register and said 
data inputs coupled to a second selected set of cells of said shift 
register such that the first set of cells selects among the second set 
of cells to provide an output from said multiplexer. 

33. The wireless terminal of claim 32, wherein said First and second sets 
of cells are mutually exclusive. 

34. The wireless terminal of claim 32, wherein said first and second sets 
of cells share a predetermined number of cells. 

35. The wireless terminal of claim 25, wherein said nonlinear scrambler 

comprises; 

a shift register having a predetermined number of cells, said shift register 

having an input to receive a stream of input bits from said long code 
generator; 
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a data encryption standard circuit having a predetermined number of inputs 
coupled to selected cells of said shift register for using a key signal 
to create an encrypted output bit for each input; and 

a register having a predetermined number of cells, each cell coupled to 
receive a bit output by said data encryption standard circuit, a 
selected cell of said register providing the output of said nonlinear 
scrambling register. 

36. The wireless terminal of claim 25, wherein said nonlinear scrambler 

comprises: 

a feedback circuit responsive to said long code generator, said feedback 

circuit including a shift register; and 
a combinational logic circuit coupled to tap selected cells of said shift 

register so as to generate an output for said nonlinear scrambler. 

37. A method for preventing interception of an information signal from 
a spread spectrum base station to a wireless terminal in a wireless communications system, 
said method comprising the steps of: 

receiving an input signal from a mobile switching center; 

coding said input signal with a channel coder for providing error correction 

to said input signal; 
interleaving the bits of said input signal with a bit interleaver so as to 

minimize the effect of error bursts; 
generating a key signal with an encryptor including a nonlinear scrambler 

such that the bits of the key signal comprise a sequence of bits that 

have a nonlinear relationship to a private long code mask; 
encrypting said input signal with said key signal; 
modulating said input signal for transmission; and 
transmitting said input signal. 

38. The method of claim 37 wherein said step of generating a key signal 
comprises the steps of: 

generating a long code sequence from a long code mask in a long code 
generator; and 

scrambling said long code sequence in a nonlinear scrambler. 
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39. The method of claim 38 wherein said step of scrambling the long 
code sequence comprises the step of scrambling the long code sequence in a nonlinear 
scrambler having a feedback loop. 

40. The method of claim 38 wherein said step of scrambling trie long 
code sequence comprises the step of scrambling the long code sequence in a nonlinear 
scrambler having a shift register coupled to receive the long code sequence and a 
combinational logic circuit coupled to selected cells of the shift register to generate the 
output of the nonlinear .scrambler. 

41 . The method of claim 3S wherein said step of scrambling the long 
code sequence comprises the steps of: 

shifting the bits of the long code sequence through a shift register having a 

predetermined number of cells; and 
using selected cells of said shift register to select among the cells of the 

shift register to provide an output of said nonlinear scrambler. 

42. The method of claim 38 wherein said step of scrambling the long 
code sequence comprises the steps of: 

shifting the bits of the long code sequence through a shift register having a 

predetermined number of cells; and 
encrypting the bits in said shift register with a data encryption standard 

circuit and a second key signal. 

43. A spread spectrum wireless infrastructure, comprising: 

a mobile switching center coupled to receive input signals from at least one 
local office and at least one toll office; 

a plurality of base stations coupled to said mobile switching center, each 
base station comprising: 

an RF antenna; 

a reverse channel that receives and processes a signal from a wireless 
terminal; and 

a forward channel that transmits an input signal from one of said mobile 
switching centers to a wireless terminal, said forward channel 
circuit comprising: 
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a channel coder responsive to said mobile switching center that 
provides error correction to said input signal, 

a bit interleaver responsive to said channel coder that rearranges the 
order of the bits in the input signal so as to minimize the 
effect of error bursts, 

an encryptor responsive to said channel coder that encrypts said 

input signal, said encryptor including a nonlinear scrambler 
for generating a key signal comprising a sequence of bits 
that have a nonlinear relationship to a private long code 
mask, and 

circuitry responsive to said channel coder and coupled to said 
antenna that modulates said input signal. 

44. . The wireless infrastructure of claim 43, wherein said encryptor 

comprises: 

a long code generator for creating a long code sequence from a long code 
mask; 

a nonlinear scrambler responsive to said long code generator for creating a 
key signal that is a nonlinear function of the bits of the long code 
mask; and 

a combinational logic circuit responsive to said bit interleaver for 
encrypting said inpnt signal. 

45. The wireless infrastructure of claim 44, wherein said non-linear 

scrambler comprises; 

a shift register having a first predetermined number of cells, said shift 

register having an input to receive a stream of input bits from said 
long code register; 

a first logic circuit coupled to said shift register so as to access the contents 
of selected cells, said first logic circuit having an output; 

a second logic circuit having first and second inputs and an output, said 
first input coupled to said long code generator, said second input 
coupled to said output of said first logic circuit, and said output 
coupled to said input of said shift register so as to provide a 
feedback loop for said nonlinear scrambler, said output of said 
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second logic circuit also comprising the output of said nonlinear 
scrambler. 

46. The wireless infrastructure of claim 45, wherein said second logic 
circuit comprises an Exclusive-OR gate. 

47. The wireless infrastructure of claim 44, wherein said nonlinear 
scrambler includes a feedback loop. 



48. The wireless infrastructure of claim 44 wherein said nonlinear 
scrambler comprises a feedback loop such that an output bit of said nonlinear scrambler is 
used to create a subsequent output bit. 

49. The wireless infrastructure of claim 44, wherein said nonlinear 

scrambler comprises: 

a shift register having a predetermined number of cells, said shift register 

having an input to receive a stream of input bits from said long code 
generator; and 

a combinational logic circuit coupled to tap the contents of selected cells of 
said shift register so as to provide an output of said nonlinear 
scrambler. 

50. The wireless infrastructure of claim 49, wherein said combinational 
logic circuit comprises an AND-gate having at least two inputs coupled to selected cells of 
said shift register. 

5 1 . The wireless infrastructure of claim 44, wherein said nonlinear 

scrambler comprises: 

a shift register having a predetermined number of cells, said shift register 

having an input to receive a stream of input bits from said long code 
generator, and 

a multiplexer having a predetermined number of data inputs and a 

predetermined number of selector inputs, said selector inputs 
coupled to a first set of selected cells of said shift register and said 
data inputs coupled to a second selected set of cells of said shift 
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register such that the first set of cells selects among the second set 
of cells to provide an output from said multiplexer. 

52. The wireless infrastructure of claim 51, wherein said first and 
second sets of cells are mutually exclusive. 

53. The wireless infrastructure of claim 51, wherein said first and 
second sets of cells share a predetermined number of cells. 

54. The wireless infrastructure of claim 44, wherein said nonlinear 
scrambler comprises: 

a shift register having a predetermined number of cells, said shift register 

having an input to receive a stream of input bits from said long code 
generator; 

a data encryption standard circuit having a predetermined number of inputs 
coupled to selected cells of said shift register for using a key signal 
to create an encrypted output bit for each input; and 

a register having a predetermined number of cells, each cell coupled to 
receive a bit output by said data encryption standard circuit, a 
selected cell of said register providing the output of said nonlinear 
scrambling register. 

55. The wireless infrastructure of claim 44, wherein said nonlinear 
scrambler comprises: 

a feedback circuit responsive to said long code generator, said feedback 

circuit including a shift register; and 
a combinational logic circuit coupled to tap selected cells of said shift 

register so as to generate an output for said nonlinear scrambler. 
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3. Detailed Description of Invention 
Field of the Invention 

This invention relates in general to the field of communications. More 
particularly, this invention relates to a cryptographic system for wireless communications. 

Background oif the Invention 

Every day, millions of users communicate with wireless systems. Such 
communications include voice and data transmissions. Most, if not all, users of these 
systems do not want the content of the communication to be publicly available. Rather, 
users generally desire to keep the content of the communication private. Unfortunately, 
without proper cryptographic precautions, interlopers can easily eavesdrop on 
communications in some wireless systems. For example, most analog wireless systems do 
not protect communications from interception. An eavesdropper can access the substance 
of the transmission by simply tuning a radio to the proper frequency. 
Some current digital wireless communication systems take precautions Co protect the 
privacy of users. For example, the Telecommunications Industry Association is drafting a 
standard for a spread spectrum wireless communications system. The current version of 
the draft standard was published in December of 1994 as Mobile Station -- Base Station 
Compatibility Standard for Dual -Mode Spread Spectrum Cellular System marked FN- 
342J (to be published as IS-95a) (hereinafter the "Draft Standard") the teachings of which 
are incorporated herein by reference. Tne spread spectrum system described in the Draft 
Standard is referred to colloquially as Code Division Multiple Access, or CDMA. The 
Draft Standard includes plans for encrypting voice or data signals prior to transmission for 
added privacy. Thus, only the true recipient of the voice or data transmission should 
obtain the content of the transmission. 

Summary of the Invention 

A previously unrecognized problem with the cryptographic system that is 
specified by the Draft Standard is that it permits an eavesdropper to easily and quickly 
cryptanalyze transmissions encrypted according to the Draft Standard and thereby gain 
access to the substance of the transmission. The forward traffic channel described in the 
Draft Standard calls for encrypting an input voice or data signal piior to transmission with 
a key signal. The Draft Standard also specifies that the input signal be combined with the 
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long code sequence in an Exclusive-OR (i.e. mod 2 addition) function to produce an 
encrypted output signal. 

The Draft Standard calls for generating the long code sequence from a 
publicly known sequence and a private 42-bit pattern, known as the long code mask. The 
publicly available sequence is placed in what can be conceptualized as a linear shift 
register. The output of the linear shift register is combined with the bits of the long code 
mask. The linear naLure of the combination causes the long code sequence to depend 
linearly on the bits of the private long code mask. This enables an eavesdropper to 
decrypt a wireless communication with access to 42 bits of the long code sequence. The 
eavesdropper could use the bits from the long code sequence to create 42 linear equations 
that depend on the 42 unknown bits of the long code mask. However, the Draft Standard 
does not call for direct transmission of the bits of the long code sequence. Rather, an 
Exclusive-OR function combines the bits of the long code sequence with the unknown 
input signal thus corrupting the bits of the long code sequence. This should diminish the 
chances that an eavesdropper will successfully cryptanalyze a transmission. This is not the 
case with the Draft Standard because of the way that the input signal is processed to form 
frames of 384 bits for error correction. 

An eavesdropper can cryptanalyze a transmission by recognizing 
relationships among the last sixteen bits in each frame of the input signal. Specifically, the 
eavesdropper can combine selected bits of the input signal from the last sixteen bits in each 
frame so as to produce rnodulo-2 sums of zero. By adding (mod 2) the bits of the output 
signal such that the sura of the corresponding input bits is zero, the eavesdropper can 
obtain data that represent combinations of bits of the long code sequence. Essentially, the 
eavesdropper can cancel the effect of the input signal on the output signal. Each bit of the 
long code sequence is linearly dependent on the 42 bits of the long code mask. Thus, the 
eavesdropper can combine known bits of the output signal to create equations that are 
linearly dependent on the bits of the long code mask. Successive frames of data yield 42 
equations so as to allow decryption of the communication within less than a second after 
the communication commences. 

Embodiments of the present invention substantially eliminate or reduce the 
ability of eavesdroppers to cryptanalyze encrypted transmissions. Specifically, exemplary 
embodiments of the present invention include a nonlinear scrambler coupled to the output 
of the long code generator. This removes the linearity from the decimated long code 
sequence and makes it more difficult to determine the Long code mask and thus 
cryptanalyze the encrypted output signal. 
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Detailed Description 

The Telecommunications Industry Association (TIA) sets standards for 
wireless communications systems. The TIA drafted a standard for a spread spectrum 
wireless communications system. The system described in the draft standard is referred to 
as Code Division Multiple Access (CDMA). Part of the draft standard addresses the need 
for privacy in wireless communications. The current version of the draft standard was 
published in December of 1994 as Mobile Station - Base Station Compatibility Standard 
for Dual -Mode Spread Spectrum Cellular System marked PN-3421 ( to be published as 
IS-95a) (hereinafter the "Draft Standard") the teachings of which are incorporated herein 
by reference. Upon detailed analysis of the Draft Standard as outlined below, I discovered 
that a communication system built in compliance with the Draft Standard is prone to 
attack by eavesdroppers despite the encryption procedure because of previously unknown 
weaknesses in the design of the cryptosystem. Embodiments of the present invention can 
overcome this weakness in the encryption procedure of the Draft Standard by providing a 
forward channel circuit and method with added security for encrypted communications. 

A detailed examination of the forward channel circuit specified in the Draft 
Standard provides an understanding of the weakness of the present cryptographic system. 
FIGURE 1 is a bEock diagram of the forward channel circuit indicated generally at 10 in a 
base station according to the Draft Standard. Forward channel circuit 10 typically 
comprises channel coder 12, block interleaver 14 and linear encryptor 16. 

Channel coder 12 processes a digital input signal, /. Input signal 1 may 
comprise, for example, an encoded digital voice, data or other appropriate signal for 
transmission in a wireless network. Channel coder 12 and block interleaver 14 minimize 
the impact on the output of forward channel circuit 10 when consecutive bits of signal / 
are lost or flipped during transmission. Channel coder 12 typically includes the series 
combination of frame quality indicator 18, tail encoder 20, convolutional encoder 22, and 
symbol repetition circuit 24. Channel coder 12, together with block interleaver 14, 
outputs a processed signal E. 

Linear encryptor 16 producesa key signal G to encrypt processed signal E. 
Linear encryptor 16 typically comprises the series combination of long code generator 26 
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with decimator 28. Long code generator 26 generates a sequence of bits from a private 
input signal M referred to as the long code mask. Signal F, output by long code generator 
26, is called the long code sequence. Decimator circuit 28 outputs 1 in 64 of the bits of 
the long code sequence as signal G. The output of decimator 28 is coupled to an input of 
a modulo-2 adder 30 such as an Exclusive-OR function. Channel coder 12 is also coupled 
to an input of modulo-2 adder 30. Modulo-2 adder 30 outputs an encrypted version of 
signal E to a multiplexer 32. A power control bit signal PCB is also provided to 
multiplexer 32. Multiplexer 32 outputs a signal O as the output of forward channel circuit 
1 0 of FIGURB 1 . A decimator 33 is coupled between decimator 28 and a control input 
of multiplexer 32. 

In operation, forward channel circuit 10 receives and processes input signal 
/ to provide an encrypted output signal O for transmission. Input signal 1 is received in 
frames of bits. The number of bits in each frame may vary based on the information 
contained in input signal /. For example, each frame in the full data rate case includes 172 
bits whereas in the lowest data rate case T each frame includes only 16 bits. Symbol 
repetition circuit 24 replicates the output of convolutional encoder 22 such that the total 
number of bits in signal E in each data rate case is the same. To aid in the analysis below, 
signals E, G, and O are regarded as binary vectors of length 384 bits. Also, each vector 
has two subscripts. The first subscript,/, refers to the frame of data in producing the 
vector and the second subscript, y, refers to an element or bit of the vector. 

Channel coder 12 manipulates input signal / to reduce the effect of burst 
errors that occur during transmission. Frame quality indicator 1 8 first creates a signal A 
by adding a predetermined number of bits to the end of each frame of input signal 7. Tail 
encoder 20 creates a signal B by adding a trailing set of 8 bits equal to zero. 
Convolutional encoder 22 creates a signal C with double the bits of signal B. An 
exemplary convolutional encoder is indicated generally at 22a in FIGURE 2. 
Convolutional encoder 22a includes a linear shift register 34 that receives signal B from 
tail encoder 20. Bit positions 34a, 34b, 34c, 34e, 34g and 34h as well as the current bit of 
signal B are coupled to a modulo-2 adder 36, such as an Exclusive-OR Function, to 
provide a first output of convolutional encoder 22a. Additionally, bit positions 34b, 34c, 
34d and 34h as well as the current bit of signal B are coupled to a modulo-2 adder 38, 
such as an Exclusive-OR function, to provide a second output of convolutional encoder 
22a. An interleaver 39 interleaves the two outputs of convolutional encoder 22a to 
provide output signal C, Thus, the output bits of convolutional encoder 22a f signal C, are 
a linear combination, e.g. modulo-2 sum, of the bits of signal B. Symbol repetition circuit 
24 and block interleaver 26 further operate on signal C to produce signal E. The bits of 
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signal £ are arranged in 16 groups of 24 bits. In the full niLe case, the bits of signal R are 



as shown in TABLE 1 below: 
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TABLE 1 -- Interleave Pattern of Tnterleaver 14 for Full Rate Case 



It is noted that the numbers in TABLE J refer to the bit positions in signal C from 
convolutional encoder 22. Additionally, each column in TABLE 1 represents one of the 
16 groups of 24 bits. The operation of channel coder 12 is public and thus a potential 
eavesdropper can access the information contained in TABLE 1. 

Linear eucryptor 16 creates a signal G to be summed (modulo-2) with 
signal E. Long code generator 26 creates a putarively private long code sequence F from 
a private long code mask M. An exemplary long code generator indicated generally at 26a 
is shown in FIGURE 3. Long code generator 26a includes a linear feedback shift register 
40 that contains a publicly known quantity having 42 bits. Each bit of the shift register is 
combined in a corresponding AND-gate 42 with a corresponding bit of the private long 
code mask iVf. The output of each AND-gate is coupled to an adder 44. Adder 44 
comprises a modulo-2 or Exclustvc-OR adder. Adder 44 adds the outputs of and-gates 42 
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together to produce a bit of the long code sequence F. The relationship between F and M 
can be expressed as: 

i 

where x w is the content of the i th cell of the linear feedback shift register 40 after having 
stepped j times during the processing of the/'* frame, m is the i th bit of the long code 
mask and F u is the j th bit of the long code sequence since the beginning of the/ fA frame. 
Decimator 28 outputs 1 in every 64 bits of signal F as signal G which is used to encrypt 
signal E. Thus, each bit of signal G can also be expressed as: 



(2) G /t ,=X 



m X, 



Signal E From block interleaver 14 is modulo-2 summed with a signal G of 
linear encryptor 16 at modulo-2 adder 30. Signal E is added to signal G with modulo-2 
arithmetic. For each bit output by modulo-2 adder 30, multiplexer 32 transmits either the 
output of modulo-2 adder 30 or the PCB signal as the output signal O of forward channel 
circuit 10. The PCB signal is a power control signal that overwrites a pair of the first 17 
bits in each group of 24 bits in signal E. Thus, only the last 7 bits of each group of 24 bits 
in signal O is free of the effect of the PCB signaL 

The long code sequence F used to encrypt the transmission is linearly 
dependent on the long code mask M (Equation (1)) .Further, channel encoder 12 
manipulates the bits of input signal I such that the bits of signal D are related to the bits of 
signal / by known, linear algebraic equations. Thus, if a potential eavesdropper can 
manipulate the output signal O to remove the effect of the input signal /, the eavesdropper 
will have data that depends linearly on the unknown bits of the long code mask M. With 
this data, the eavesdropper can use standard techniques for the solution of linear equations 
to determine the long code mask M. 

The bits of signal E output by channel coder 12 can be combined to create 
linear equations that depend only on the bits of the long code mask M. To see this 
relationship, consider the mathematical representation of forward channel circuit 10. First, 
a bookkeeping detail. Due to the effect of the PCB signal, the only bits that the 
eavesdropper can rely on are the last 7 bits of each group of 24 bits in output signal O. 
Thus, in the/" 1 frame, for all bit positions./ falling into the last 7 bits of each of the groups 
of bits, the output of forward channel circuit 10 can be described by the equation: 



( 45 ) 45§fPF9- 1 2 13 8 8 

20 

(3) E f j © G rj = 

In each frame. Equation (3) governs the value of 1 12 bits of signal J input into forward 
channel circuit 10. Equation (2) above states that G depends on the unknown bits m, of 
the long code mask. The vector E is unknown to the eavesdropper. Thus to create an 
equation that only depends on the effect of the vector E must be removed. If a vector 
a can be found such that ctj is zero for all values of j among the first seventeen bits in each 
group of 24 bits and such that 

(4) <Ct,£}> =s 0 

then the effect of E on the output vector O can be removed. It is noted that equation (4) 
refers to the dot product with modulo-2 arithmetic of the vectors a and £. In the vector 
a, the bits are selected such that the dot product with E creates a sum of bits in E that 
equal zero. Taking the dot product of each vector in Equadon (3) with a produces: 

(5) <a y E f > © <OL 7 G f > = <rx J O r >. 
Substituting Equation (4) into equation (5), it is seen that: 

(6) «x,G f > = <ot,0/>- 

As discussed above in Equation (2), signal G is a decimated version of signal F and each 
bit is thus linearly dependent on the bits of the long code mask mi. Equation (6) can thus 
be expanded as follows: 

/ J 
Substituting equation (2) into equation (7) reveals that: 

(8) X a ; = X a 7°/.J 

This is a linear equation wherein the bits m, of the long code mask are the only unknowns. 
Thus, the eavesdropper can use known techniques to determine the bits of the long code 
mask provided enough data is gathered to produce 42 equations. The eavesdropper must 
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first identify the vectors a that satisfy Equation (3). Channel coder 12 makes this 
possible. 

To find the vectors a that satisfy Equation (3), trace the last 1 fi bits of data 
in a signal B through convolutional encoder 22. Assume the last eight bits are 0 as set by 
tail encoder 20. Further assume that the prior eight bits are a. b, c, d, e, f f g> and h with a 
being the bit that is followed by the eight zero bits. Then, the last sixteen bits of signal C 
are: 



(9) 


c J69 = a © b © c © e © g © h; 


(10) 


c }7!} = b@c® d® h; 


(ID 


cm =a®bQd®f&g\ 


(12) 


cj 72 = a©iec«?; 


(13) 


cj?3 = a® c © e ®f. 


(14) 


c s74 = a © b ©/; 


(15) 


Cj7s = b&d@ <r, 


(16) 


c 3 76 = a © e; 


(17) 


c 37T = a © c © d; 
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Cj7i ■* d\ 


(19) 


C379 — b © c; 


(20) 


cxo = c; 


(21) 


Cjjsi = a® b\ 


(23) 


Cist = b; 


(24) 


C383 - a; and 


(25) 


ex* = a. 



Combinations of the bits of signal C that yield a modulo-2 sum of zero 
satisfy Equation (3), For example, the sum of bits cj*? and cj/m is zero because the bits arc 
equal. It is noted thai after symbol repetition and interleaving bits 383 and 384 of signal C 
become bits 192 and 384 of signal E, respectively. Thus, a vector a that results in the sum 
of these two bits will yield a linear equation in the bits m, of the long code mask M as 
follows: 

(26) Gfj 92 © G/jew = 0/jvi © Ofjx*. 
Equation (26) can be rewritten as: 

(27) 2^ (jt i-At«4.i«,® je i./.c«*.3M))= 
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In Equation (27), the only unknowns are the bits m k of the long code mask. 
Other combinations that result in vectors a arc as Follows: 

(28) cj 69 m C370 © c 37 r © c m © c J79 © c.*j = 0; 

(29) C S 77 © CS73 © C 37 P © Cj,/ = 0; 

(30) c w © c w © © c m © c i3i = 0; 

(31) cm ® ^©^ = 0; 

(32) © © c J7J © c 375 © c JS/ = 0; 

(33) c 379 © c J(W © cm e c JM = 0; and 

(34) C373 © c J7rf © Csrr © C.i7* = 0. 

Thus, in the full rate case, the eavesdropper can create at least eight combinations of bits 
from one frame of data that cancel the effect of the input signal / on the output signal O. 
With just six frames of data the eavesdropper can create more than the 42 equations 
necessary to determine the value of the 42 bits of the long code mask M. This data can be 
gathered in less than one second. In the lower rate cases, the task of the eavesdropper is 
somewhat simplified. TABLE 2 below shows the bits of signal E with the number of the 
bit position for each bit as in signal C output by the convoiutional encoder. 
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TABLE 2 — Interleave Pattern of Interleaver 14 for Low Rate Case 



It is noted that each bit is repeated eight times. Thus, in the low rate case, the 
eavesdropper can determine the bits of the long code mask M with a single frame of data. 
Thus, it is easier in the low rate case to create equations to determine the bits of the long 
code mask M. 

FIGURE 4 Is a block diagram of a wireless system indicated generally at 
110 that implements a spread spectrum technology and is constructed according to the 
teachings of the present invention. Wireless system 110 includes a plurality of base 
stations 1 L2 that are coupled to and in communication with a Mobile Switching Center 
(MSC) 1 14. MSC 1 14 is coupled to and in communication with (he public switched 
telephone network (PSTN) 1 16, including one or more local offices 1 18 and one or more 
toll offices 120. PSTN 1 16 further includes fixed terminals 122 coupled to and in 
communication wilh local offices 1 18 and toll offices 1 20. Fixed terminals may be 
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coupled to PSTN by any appropriate telecommunications cable including, for example, 
copper wires, fiber optic cables and the like. Wireless system I tO also includes one or 
more wireless terminals 124. The forward channel of each wireless terminal J 24 and each 
base station 1 12 includes an encryptor as described below for providing increased 
transmission privacy when compared to prior systems and methods. 

In operation, wireless system 1 10 transmits an encrypted signal between a 
base station 1 12 and a wireless terminal 124. For example, a communication to a wireless 
terminal 124 may be initiated at a fixed terminal 122. Local office 1 18 and MSC 1 14 
connect fixed terminal 122 to an appropriate base station 1 12. Base station 1 12 encrypts a 
signal from fixed terminal 122 and transmits the encrypted signal. The appropriate 
wireless terminal 124 receives the encrypted signal. Wireless terminal 124 decrypts the 
signal to complete the communication. 

FIGURE 5 is a block diagram of one embodiment of a base station 
indicated generally at 112 and constructed according to the teachings of the present 
invention. Base station 1 12 includes a forward channel 126 for transmitting signals to a 
wireless terminal 124. Base station 1 12 also includes a reverse channel 128 for receiving 
signals from a wireless terminal 124. Forward channel 126 includes an encryptor 130 that 
createsa key signal that is a nonlinear function of a private long code mask. Thus, forward 
channel 126 provides increased transmission privacy. 

Forward channel 126 includes a channel coder 132 that is coupled to MSC 
1 14. Forward channel 126 further includes the series combination of bit interleaver 134, 
encryptor 130, Walsh function modulator 136, quadrature spreader 138, quadrature 
carrier modulator 140, and RF transmitter 142. RF transmitter 142 is coupled to antenna 
144. Reverse channel 1 28 includes thaseries combination of RF receiver 146 t quadrature 
carrier demodulator 148, quadrature despreader 150, despreader 152, Walsh symbol 
demodulator 154, bit dcintcrleaver L56. and channel decoder 158. 

In operation, forward channel 126 processes and encrypts a signal from 
MSC 1 14 for transmission on antenna 144, MSC 1 14 provides a digital signal to channel 
coder 1 32. Channel coder 1 32 codes the signal for error correction after transmission. 
Bit interleaver 134 rearranges the order of the bits in the signal so as to minimize the 
impact of error bursts. Encryptor 130 uses a nonlinear encryption signal to encrypt the 
signal from bit interleave! 134. Walsh function modulator 136 modulates the signal by 
multiplying the signal with a selected Walsh function. Quadrature spreader 138 spreads 
the signal with a selected pscudu-noise (PN) code that is unique to the transmission 
between fixed terminal 122 and wireless terminal 124. Quadrature carrier modulator 140 
modulates the signal for transmission by RF transmitter 1 42 on antenna 144. 
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Reverse channel 128 receives a signal from a wireless terminal 124 at 
antenna 144 and receiver 146. Quadrature carrier demodulator 148 demodulates the 
signal from the carrier signal for processing. Quadrature despreader 150 uses the 
appropriate PN signal to despread the signal from wireless terminal 124. Despreader 152 
uses a private key signal to further despread the signal from wireless terminal 124. Walsh 
symbol demodulator 154 demodulates the signal with an appropriate Walsh function. Bit 
deinterleaver 156 rearranges the bits in the signal to undo an interleaving operation 
performed by wireless terminal 124. Channel decoder 158 uses error correction 
techniques to correct errors in the signal from wireless terminal 124. 

FIGURE 6 is a block diagram of a wireless terminal indicated generally at 
124 and constructed according to the teachings of the present invention. Wireless 
terminal 124 includes a reverse channel L60 for transmitting signals to a base station 1 12. 
Wireless terminal 124 also includes a forward channel 162 for receiving signals from a 
base station 1 12. Forward channel 162 includes a decryptor 164 that creates a key signal 
that is a nonlinear function of a private long code mask. Thus, forward channel 1 62 
provides increased transmission privacy. 

Wireless terminal 16S includes an input/output (I/O) device 166. I/O 
device 166 may comprise a speaker and a microphone. Alternatively, I/O device 166 may 
comprise an appropriate data port Reverse channel 160 includes a voice coder 168 
coupled to I/O device 166. Voice coder 168 is coupled to the series combination of 
channel coder 170, bit interleaver 172, Walsh function modulator 174, spreader 176, 
quadrature spreader 178, quadrature carrier modulator 180, and RF transmitter 182. RF 
transmitter 182 is coupled to antenna 184. Reverse channel 162 includes the series 
combination of RF receiver 186, quadrature carrier demodulator 188, quadrature 
despreader 190, Walsh function demodulator 192, decryptor 164, bit deinterleaver 194, 
channel decoder 196 and voice decoder 198. Voice decoder 198 is coupled to I/O device 
166. 

In operation, reverse channel 160 processes a signal from a user for 
transmission on antenna 184. Voice coder 168 codes a digital signal from I/O device 166. 
Channel coder 170 codes the signal for error correction after transmission. Bit interleaver 
172 rearranges the order of the bits in the signal so as to minimize the impact of error 
bursts. Walsh function modulator 174 modulates the signal by multiplying the signal with 
a selected Walsh function. Spreader 176 usesa key signal to spread the signal from Walsh 
function modulator 174. Quadrature spreader 178 spreads the signal with a selected 
pseudo-noise (PN) code that is unique to the transmission between fixed terminal 122 and 
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wireless terminal 124. Quadrature carrier modulator 180 modulates the signal for 
transmission by RF transmitter 182 on antenna 184. 

Forward channel 162 receives a signal from base station 1 12 at antenna 
184 and receiver 186. Quadrature carrier demodulator 188 demodulates the signal from 
the carrier signal for processing. Quadrature despreader 190 uses the appropriate PN 
signal to despread the signal from base station 1 12. Walsh function demodulator 192 
demodulates the signal witii an appropriate Walsh function. Decryptor 164 uses a private 
key signal to descramble the signal from base station 1 12. Bit deinterleaver 194 
rearranges the bits in the signal to undo an interleaving operation performed by base 
station J 12. Channel decoder 196 uses error correction techniques to correct errors in the 
signal from base station 1 12. Voice decoder 198 decodes the signal for I/O device 166 to 
complete the transmission. 

FIGURE 7 is an embodiment of an encryptor indicated generally at 130 for 
use in forward channel 126 of FIGURE 5. Encryptor 130 generates a key signal with the 
series combination of a long code generator 200, a nonlinear scrambler 202 and a 
decimator 204. The output of decimator 204 is coupled to a first input of a modulo- 2 
adder 206. The second input of adder 206 is coupled to bit interleave 134. 

In operation, long code generator 200 generates a sequence of bits from a 
private long code mask. Long code generator 200 may comprise the long code generator 
22a of FIGURE 3 such that the bits of the long code sequence depend linearly on the bits 
of the long code mask. Nonlinear scrambler 202 scrambles the bits of the long code 
sequence such that the output bits of nonlinear scrambler 202 have a nonlinear dependence 
on the bits of the long code mask. Exemplary embodiments of nonlinear scrambler 202 
are described below with respect to FIGURES 9 through 15. The nonlinearity created by 
nonlinear scrambler 202 may vary in complexity. For example, nonlinear scrambler 202 
may include a feedback loop. Alternatively, nonlinear scrambler 202 may comprise a 
simple combinational logic circuit that introduces a nonlinearity into the long code 
sequence. Thus, a system constructed according to the teachings of the present invention 
will increase the difficulty for an eavesdropper to successfully obtain the bits of the long 
code mask M. Decimator 204 selects bits output from nonlinear scrambler 202 with a 
known frequency. For example, decimator 204 may output 1 in 64 of the bits output by 
nonlinear scrambler 202. Adder 206 adds (modu!o-2) the signal from bit interleaver 134 
with the signal from decimator 204. 

FIGURE 8 is an embodiment of adecryptor indicated generally at 164 for 
use in forward channel 162 of FIGURE 6. Decryptor 164 generates a key signal with the 
series combination of a long code generator 208, a nonlinear scrambler 210 and a 
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decimator 212. The output of decimator 212 is coupled to a first input of a modulo-2 
adder 214. The second input of adder 214 is coupled to Walsh function demodulator L92. 

In operation, decryptor 164 creates a key signal to decrypt a signal 
received from a base station 1 12. As such, decryptor 164 independently creates a key 
signal that is identical to the key signal created in encryptor 130. Thus, long code 
generator 208 generates a sequence of bits from a private long code mask. Long code 
generator 208 may comprise the long code generator 22a of FIGURE 3 such that the bits 
of the long code sequence depend linearly on the bits of the long code mask. Nonlinear 
scrambler 210 scrambles the bits of the long code sequence such that the output bits of 
nonlinear scrambler 210 have a nonlinear dependence on the bits of the long code mask. 
Exemplary embodiments of nonlinear scrambler 2 10 are described below with respect to 
FIGURES 9 through 15. The nonlinearity created by nonlinear scrambler 2 1 0 may vary in 
complexity. For example, nonlinear scrambler 210 may include a feedback loop. 
Alternatively, nonlinear scrambler 210 may comprise a simple combinational logic circuit 
that introduces a nonlinearity into the long code sequence. Thus, a system constructed 
according to the teachings of the present invention will increase the difficulty for an 
eavesdropper to successfully obtain the bits of the long code mask M. Decimator 212 
selects bits output from nonlinear scrambler 210 with a known frequency. For example, 
decimator 212 may output 1 in 64 of the bits output by nonlinear scrambler 210. Adder 
214 adds the signal from Walsh function demodulator 192 with the signal from decimator 
212. 

FIGURE 9 is one embodiment of a nonlinear scrambler indicated generaUy 
at 202a and constructed according to the teachings of the present invention. It is noted 
that each circuit shown in FIGUREs 9 through 15 can be used either in encryptor 130 or 
decryptor 164. For simplicity, FIGURES 9 through 15 are described only with respect to 
encryptor 130. Scrambler 202a comprises an Exclusive-OR gate 216, a shift regisier 218, 
a logic circuit 220 and a switch 222. The output of long code generator 200 and the 
output of logic circuit 220 are coupled to the inputs of Exclusive-OR gate 216. Exclusive- 
OR gate 216 provides an output to shift register 218 and to switch 222. Logic circuit 220 
taps two or more cells of shift register 218. Finally, the output of long code generator 200 
is also coupled to switch 222. 

In operation, scrambler 202a outputs a sequence of bits that are a nonlinear 
combination of the bits of the long code sequence by use of a feedback loop. Exclusive- 
OR gate 2 1 6 outputs bits to shift register 2 1 8. The bits shift through shift register 218 and 
are selectively combined in logic circuit 220. Logic circuit 220 may comprise a simple 
AND-gate. Alternatively, logic circuit 220 may comprise a more complicated 
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combinational logic circuit. Logic circuit 220 provides a second input to Exclusive-OR 
gate 216 such that the bits entering shift register 218 ultimately depend on the current bit 
of the long code sequence and a logical combination of prior bits output by Exclusive-OR 
gate 216. Switch 222 may by-pass the effect of scrambler 202a by coupling long code 
generator 200 directly to decimator 204. A reset signal is also provided to clear shift 
register 2 IS. 

FIGURE 10 illustrates another embodiment of a nonlinear scrambler 
indicated generally at 202b constructed according to the teachings of the present 
invention. Scrambler 202b comprises a shift register 224 having 64 cells. Each ceil of 
shift register 224 is coupled to an input of a multiplexer 226. Additionally, the cells 
labeled 0 through 5 of shift register 224 are coupled to selector inputs of multiplexer 226. 
It is noted that any six of the cells of shift register 224 could be used as the selector inputs 
for multiplexer 226. 

In operation, the bits of the long code sequence shift through shift register 
224. The values in cells 0 through 5 of shift register 224 select one of the cells from shift 
register 224 to be passed as an output bit by multiplexer 226 to decimator 204, 

FIGURE 11 illustrates another embodiment of a nonlinear scrambler 
indicated generally at 202c and constructed according to the teachings of the present 
invention. Scrambler 202c comprises a shift register 228 having 64 cells. N selected cells 
of shift register 228 are coupled to selector inputs of multiplexer 230. Additionally, 2 N 
selected cells of shift register 22S are also coupled as inputs of multiplexer 230. 

In operation, the bits of the long code sequence shift through shift register 
228. Multiplexer 230 selects a cell of shift register 228 based on the selector inputs from 
shift register 228. The value of the selected cell is passed as the output of scrambler 202c 
to decimator 204. 

FIGURE 12 illustrates another embodiment of a nonlinear scrambler 
indicated generally at 202d constructed according to the teachings of the present 
invention. Scrambler 202d comprises a shift register 232 having 64 cells. Each cell of 
shift register 232 is coupled to an input of data encryption standard (DES) circuit 234. 
DES circuit 234 encrypts data according to Federal Information Processing Standards 
Publication 46 dated January 15, 1977. A private key signal is provided to DES circuit 
234. DES circuit 234 comprises 64 outputs that are coupled to a register 236. A selected 
cell of register 236 is provided as an output for scrambling circuit 202d. 

In operation, the bits of the long code sequence shift through shift register 
232. DES circuit 234 encrypts the data in shift register 232 using the key signal and 
conventional DES techniques. DES circuit 234 provides an encrypted version of the data 
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in shift register 232 to register 236. Scrambler 202d provides an output signal from 
register 236 to decimator 204. 

FIGURE 13 illustrates another embodiment of a nonlinear scrambler 
indicated generally at 202e and constructed according to the teachings of the present 
invention. Scrambler 202e comprises a shift register 240 having 64 cells. N selected cells 
of shift register 240 are coupled to inputs of a nonlinear function 242. For example, 
nonlinear function 242 may comprise a two input AND-gate or other appropriate function 
for creating a nonlinear output. 

In operation, the bits of the long code sequence shift through shift register 
240. Nonlinear function 242 generates an output signal based on the values of the N input 
cells of shift register 240. 

FIGURE 14 is another embodiment of a nonlinear scrambler indicated 
generally at 202f and constructed according to the teachings of the present invention. 
Scrambler 202f comprises an Exclusive-OR gate 244, a shift register 246, a first logic 
circuit 248 and a second logic circuit 250. The output of long code generator 200 and the 
output of first logic circuit 248 are coupled to the inputs of Exclusive-OR gate 244. 
Exclusive-OR gate 244 is coupled to shift register 246. First logic circuit 248 taps two or 
more cells of shift register 246. Finally, second logic circuit 250 taps a second selected set 
of cells of shift register 246. Second logic circuit 250 comprises the output of scrambler 
202f. A reset signal is also provided to clear shift registers 248 and 250. 

In operation, scrambler 202f outputs a sequence of bits that are a nonlinear 
combination of the bits of the long code sequence by use of a feedback loop. Exclusive- 
OR gate 244 outputs bits to shift register 246. The bits shift through shift register 246 and 
are selectively combined in first logic circuit 248. First logic circuit 248 may comprise a 
simple AND-gate. Alternatively, first logic circuit 248 may comprise a more complicated 
combinational logic circuit. First logic circuit 248 provides a second input to Exclusive- 
OR gate 244 such that the bits entering shift register 246 ultimately depend on the current 
bit of the long code sequence and a logical combination of prior bits output by Exclusive- 
OR gate 244. Second logic circuit 250 combines bits from selected cells of register 246 as 
output for scrambler 202f . 

FIGURE 15 is another embodiment of a nonlinear scrambler indicated 
generally at 202g and constructed according to the teachings of the present invention. 
Scrambler 202g comprises an Exclusive-OR gate 252, a shift register 254, a first logic 
circuit 256 and a second logic circuit 258. The output of long code generator 200 and the 
output of first logic circuit 256 are coupled to the inputs of Exclusive-OR gate 252. 
Exclusive-OR gate 252 is coupled to shift register 254. First logic circuit 256 taps one of 
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more cells of shift register 256. Additionally, a private key signal K ( may be provided to 
first logic circuit 256 for use in creating the encryption signal. Second logic circuit 258 
taps a second selected set of cells of shift register 254. A second private key K2 may be 
provided to second logic circuit 258 for use in creating the encryption signal. Second 
logic circuit 258 comprises the output of scrambler 202g. A reset signal is also provided 
to clear shift registers 256 and 258. 

In operation, scrambler 202g outputs a sequence of bits that have a 
nonlinear dependence on a private sequence of bits. The private sequence of bits can be 
the long code mask as processed by long code generator 202, signal K t or K 2 , or any 
appropriate combination thereof. Exclusive-OR gate 252 outputs bits to shift register 
254. The bits shift through shift register 254 and are selectively combined with bits of 
signal Ki in first logic circuit 256. First logic circuit 248 may comprise a simple and-gate. 
Alternatively, first logic circuit 256 may comprise a more cornpli cared combinational logic 
circuit First logic circuit 256 provides a second input to Exclusive-OR gate 252 such that 
the bits entering shift register 254 ultimately depend on the current bit of the long code 
sequence and a logical combination of prior bits output by Exclusive-OR gate 252 and the 
signal K|. Second logic circuit 258 combines bits from selected cells of register 254 with 
bits of signal K 2 as output for scrambler 202f. 

It is noted that nonlinear scrambler 202g can achieve increased privacy 
over conventional systems without use of long code generator 200. If long code 
generator 200 is omitted from encryptor 130, either Ki, K2 or both must be private to 
increase privacy. Additionally, if either Kl, K 2 or both are private, long code generator 
200 could create a long code sequence from a public long code mask M. Tt is also noted 
that cither Ki or K^may be omitted without departing from the teachings of the present 
invention. 

FIGURE 16 is another embodiment of an encryptor indicated generally at 
1 30a for use in the base station U2 of FIGURE 5. Encryptor 130a generates a key signal 
with the series combination of a shift register 260 and, a nonlinear combiner 262 and a 
decimator 264. The output of decimaxor 264 is coupled to a first input of a modulo-2 
adder 266. The second input of adder 266 is coupled to bit inter leaver 134. A private 
long code mask, M, is provided to nonlinear combiner 262. 

In operation, ecryptor 130a generates a key signal with bits that are a 
nonlinear combination of the bits of the long code mask. Shift register 260 generates a 
sequence of bits from a publicly known quantity. Nonlinear combiner 262 combines the 
long code mask M with the output of shift register 260. Decimator 264 selects bits output 
from nonlinear combiner 262 with a known frequency. For example, decimator 264 may ■ 
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output 1 in 64 of the bits output by nonlinear combiner 262. Adder 266 adds (modulo-2) 
the signal from bit interleaver 134. with the signal from decimator 264. 

FIGURE 17 is another embodiment of a decryptor indicated generally at 
164a for use in the wireless terminal 124 of FIGURE 6. Decryptor 164a generates a key 
signal with the series combination of a shift register 268, a nonlinear combiner 270 and a 
decimator 272. The output of decimator 272 is coupled to a first input of a moduIo-2 
adder 274. The second input of adder 274 is coupled to Walsh symbol demodulator 154. 
A private long code mask, M y is provided to nonlinear combiner 270. 

In operation, decryptor 164a generates a key signal with bits that are a 
nonlinear combination of the bits of the long code mask. Shift register 268 generates a 
sequence of bits from a publicly known quantity. Nonlinear combiner 270 combines the 
long code mask M with the output of shift register 268. Decimator 272 selects bits output 
from nonlinear combiner 270 with a known frequency. Far example, decimator 272 may 
output 1 in 64 of the bits output by nonlinear combiner 270. Adder 274 adds (modulo-2) 
the signal from Walsh symbol modulator 154 with the signal from decimator 272. 

Although the present invention has been described in detail, it should be 
understood that various alterations, substitutions and changes can be made hereto without 
departing from the spirit and scope of the invention as defined by the appended claims. 
For example, the shift registers shown in FIGURES 9 through 15 are not limited to 64 
cells. The number of cells may be varied without departing from the teachings of the 
present invention. The 64 cell registers are simply shown by way of example and not by 
way of limitation. Furthermore, the encryptors and decryptors described herein can be 
used without decimators. Alternatively, the function of decimator can be partially or fully 
incorporated into other circuitry- 
Scramblers 202a through 202g each includes one or more shift registers. It 
is emphasized that these shift registers are shown by way of example and not by way of 
limitation. The shift registers store input bite provided to the scrambler for use in creating 
subsequent output bits. To this end. the shift registers in FIGURES 9 through 15 can be 
replaced with any appropriate circuit for performing this same function. 

To ensure that the nonlinear scramblers constructed according to the 
teachings of the present invention in the base station and in the wireless terminal produce 
identical outputs when fed with identical long code sequence inputs during a transmission, 
the scramblers should start with the same internal state. Thus, any shift registers in the 
scramblers must start with identical contents. One means for accomplishing this is to reset 
any such shifi registers with fixed initial values in response to a reset signal during the time 
of hand-off. The reset signals shown in FIGURES 9, 14 and 15 can be used to implement' 
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this feaLure. The registers may also be reset, for example, such as at the beginning of each 
new frame. 

It is noted that the Exclusive-OR gates specified in FIGURES 9, 14 and 1 5 
can be implemented with any appropriate function that performs modiilo-2 addition. 

It is also noted that the number of bits in the long code mask may be varied 
from 42 without departing from the spirit and scope of the teachings of the present 
invention. 
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4. Brief Description of Drawings 

FIGURE I is a block diagram of a forward channel circuit of a spread 
spectrum wireless system according to a draft standard published in December 1994 as 
PN-3421 by the Telecommunications Industry Association; 

FIGURE 2 is a block diagram of a convolution encoder for use in the 
forward channel circuit of FIGURE 1; 

FIGURE 3 is a block diagram of an embodiment of a long code generator 
for use in the forward channel circuit of FIGURE I ; 

FIGURE 4 is a block diagram of a spread spectrum wireless infrastructure 
incorporating a nonlinear scrambler constructed according to the teachings of the present 
invention; 

FIGURE 5 is a block diagram of a base station in the spread spectrum 
wireless system of FIGURE 4; 

FIGURE 6 is a block diagram of a wireless terminal in the spread spectrum 
wireless system of FIGURE 4; 

FIGURE 7 is an embodiment of an encryptor for use in the base station of 

FIGURE 5; 

FIGURE 8 is an embodiment of a decry ptor for use in the wireless terminal 

of FIGURE 6; 

FIGURE 9 is an embodiment of a nonlinear scrambler for use in the 
encryptor of FIGURE 7 and the decryptor of FIGURE 8 ; 

FIGURE 10 is another embodiment of a nonlinear scrambler for use in the 
encryptor of FIGURE 7 and the decryptor of FIGURE 8; 

FIGURE 1 1 is another embodiment of a nonlinear scrambler for use in the 
encryptor of FIGURE 7 and the decryptor of FIGURE 8; 

FIGURE 12 is another embodiment of a nonlinear scrambler for use in the 
encryptor of FIGURE 7 and the decTyptor of FIGURES; 

FIGURE 13 ts another embodiment of a nonlinear scrambler for use in the 
encryptor of FIGURE 7 and the decryptor of FIGURE 8; 

FIGURE 14 is another embodiment of a nonlinear scrambler for use in the 

encryptor of FIGURE 7 and the decryptor of FIGURE 8; 

FIGURE 15 is another embodiment of a nonlinear scrambler for use in the 

encryptor of FIGURE 7 and the decryptor of FIGURE 8 ; 

FIGURE 16 is another embodiment of an encryptor for use in the base 

station of FIGURE 5; and 

FIGURE 17 is another embodiment of a decryptor for use in the wireless 

terminal of FIGURE 6. 
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1. Abstract 

A wireless communication system (13 0) with increased privacy. The system 
(110) transmits an encrypted signal between a base station (112) and a wireless terminal 
(122). In the forward channel, the base station (112) includes an encryptor (130) with a 
nonlinear scrambler (202) that creates an key signal that has a nonlinear dependence on a 
long code mask M. The wireless terminal (122) similarly includes a decryptor (164) 
with a nonhnear scrambler (210) that creates a key signal that has a nonlinear 
dependence on the long code mask M 



2. Representative Drawing 
Figure 4. 



